EU Artificial Intelligence Act
The EU AI Act (Regulation (EU) 2024/1689) is the world's first comprehensive horizontal regulation of artificial intelligence systems. It entered into force on August 1, 2024 and applies in tiered phases: prohibitions on unacceptable-risk practices apply from February 2, 2025; obligations for general-purpose AI (GPAI) models from August 2, 2025; and the bulk of high-risk system requirements from August 2, 2026, with extended timelines for high-risk systems embedded in regulated products through 2027. The Act takes a risk-based approach, sorting systems into prohibited, high-risk, limited-risk (transparency obligations), and minimal-risk tiers. Enforcement is split between the European Commission's AI Office (for GPAI and cross-border matters) and national market-surveillance authorities. Maximum fines reach €35 million or 7% of worldwide annual turnover for prohibited practices, whichever is higher.
Jurisdiction
EU
Enforcement
August 2, 2026
Maximum penalty
Tiered (Art. 99): up to €35M or 7% of global turnover for prohibited practices (Art. 5); up to €15M or 3% for high-risk and GPAI obligation violations; up to €7.5M or 1% for supplying misleading information. SMEs/start-ups: lower of the two thresholds (Art. 99(6)).
Key obligations
- 01Classify each AI system against the Act's risk tiers (prohibited, high-risk per Annex III, limited-risk, or minimal-risk) and document the determination.
- 02For high-risk systems: implement a risk management system, data governance, technical documentation, automatic logging, transparency to deployers, human oversight, and accuracy/robustness/cybersecurity measures.
- 03Register stand-alone high-risk systems in the EU public database before placing them on the market.
- 04Conduct a conformity assessment (self-assessment for most Annex III systems; notified-body assessment for biometric and certain product-embedded systems) and obtain CE marking.
- 05Providers of general-purpose AI models: publish a training-data summary, comply with EU copyright law, and (for models with systemic risk) conduct adversarial testing and report serious incidents.
- 06Deployers of high-risk systems: ensure human oversight, monitor operation, retain logs for at least six months, and conduct a fundamental-rights impact assessment for public bodies and certain private actors.
- 07Notify the AI Office and national authorities of serious incidents within 15 days (or sooner for fatal or critical-infrastructure events).
Vendors that support EU AI Act
Sorted by coverage level. Full coverage shown first.
37 vendors
| Vendor | HQ | Founded | Size | Pricing | Coverage | Last verified |
|---|---|---|---|---|---|---|
| Saidot | Helsinki, Finland | 2018 | 11-50 | No public pricing listed; contact sales implied via demos and sign-ups. | Full | Apr 23, 2026 |
| LatticeFlow AI | Zurich, Switzerland | 2020 | 11-50 | No public pricing. Enterprise platform sold via direct sales. Contact sales for demo and pricing. | Full | Apr 22, 2026 |
| Prompt Security | Tel Aviv, Israel | 2023 | 11-50 | Now part of SentinelOne Singularity Platform. Continues as a standalone product. Enterprise pricing only; contact sales or SentinelOne. | Full | Apr 22, 2026 |
| Enzai | Belfast, United Kingdom | 2021 | 2-10 | SaaS platform, enterprise subscription. No public pricing listed. Contact sales via enz.ai. | Full | Apr 22, 2026 |
| Fairly AI | Kitchener, Canada | 2020 | 11-50 | On-premises or private-cloud deployments; quote-based. | Full | Apr 21, 2026 |
| Collibra AI Governance | New York, United States | 2008 | 1000+ | Enterprise subscription; contact sales for custom quote based on users, assets, modules. | Full | Apr 23, 2026 |
| Monitaur | Boston, United States | 2019 | 11-50 | Enterprise annual subscription; no public pricing listed. Forrester Wave cited 'pricing flexibility and transparency' as a highest-score criterion. Contact sales for quotes. | Full | Apr 22, 2026 |
| Trustible | Arlington, United States | 2023 | 11-50 | Contact sales for enterprise pricing; no public plans listed | Full | Apr 23, 2026 |
| ModelOp | Chicago, United States | 2018 | 11-50 | No public pricing listed; contact sales for enterprise quotes. | Full | Apr 23, 2026 |
| Modulos AI Governance | Zurich, Switzerland | 2018 | 11-50 | Contact for pricing | Comprehensive | Apr 24, 2026 |
| Luminos.Law (ZwillGen AI Division) | Washington, DC, US | 2019 | 51-200 | Contact for pricing | Comprehensive | Apr 24, 2026 |
| DataRobot | Boston, US | 2012 | 1000+ | Contact for pricing | Comprehensive | Apr 24, 2026 |
| 2021.AI | Copenhagen, DK | 2016 | 51-200 | Contact for pricing | Comprehensive | Apr 27, 2026 |
| Naaia | Louveciennes, FR | 2021 | 11-50 | No public pricing tiers; demo and quote requested via website. | Comprehensive | Apr 27, 2026 |
| HiddenLayer | Austin, United States | 2022 | 51-200 | Enterprise-only, contact sales for pricing. No public pricing listed on website. | Partial | Apr 22, 2026 |
| Lakera | Zurich, Switzerland | 2021 | 51-100 | Enterprise-focused SaaS. No public pricing listed. API-based pricing model expected. Contact sales. | Partial | Apr 22, 2026 |
| TrojAI | Saint John, Canada | 2019 | 11-50 | Enterprise-only, no public pricing. Contact sales at troj.ai. | Partial | Apr 22, 2026 |
| OneTrust AI Governance | Atlanta, United States | 2016 | 1000+ | Enterprise platform; contact sales for quote, no public pricing listed | Partial | Apr 23, 2026 |
| BABL AI | Iowa City, US | 2018 | 11-50 | Contact for pricing | Partial | Apr 24, 2026 |
| Vanta | San Francisco, USA | 2018 | 500-1000 | Contact for pricing | Partial | Apr 26, 2026 |
| IBM watsonx.governance | Armonk, USA | — | 1000+ | Contact for pricing | Partial | Apr 26, 2026 |
| Dataiku Govern | New York, USA | 2013 | 1000+ | Contact for pricing | Partial | Apr 26, 2026 |
| ServiceNow AI Control Tower | Santa Clara, USA | 2004 | 1000+ | Contact for pricing | Partial | Apr 26, 2026 |
| Securiti Data Command Center | San Jose, USA | 2018 | 500-1000 | Contact for pricing | Partial | Apr 26, 2026 |
| BigID | New York, USA | 2016 | 500-1000 | Contact for pricing | Partial | Apr 26, 2026 |
| Credo AI | Palo Alto, US | 2020 | 51-200 | Contact sales for enterprise subscription quote. Credo AI homepage | Partial | Apr 26, 2026 |
| Holistic AI | London, UK | 2020 | 51-200 | Enterprise platform; contact sales for quote. | Partial | Apr 26, 2026 |
| Fiddler AI | Palo Alto, US | 2018 | 51-200 | Contact for pricing | Partial | Apr 26, 2026 |
| ValidMind | Palo Alto, US | 2022 | 11-50 | Custom pricing plans; contact sales. | Partial | Apr 26, 2026 |
| CalypsoAI | Dublin, IE | 2018 | 51-200 | Enterprise licensing; contact sales for quote, depending on deployment (SaaS/on-prem/hybrid) and plan. | Partial | Apr 26, 2026 |
| FairNow | McLean, US | 2023 | 11-50 | Contact sales for quote; no public pricing listed | Partial | Apr 26, 2026 |
| TrustArc | Walnut Creek, US | 1997 | 501-1000 | Enterprise subscription; contact sales for quote; modular pricing based on scope and modules | Partial | Apr 26, 2026 |
| Lasso Security | Tel Aviv, IL | 2023 | 11-50 | Enterprise pricing only. Not publicly listed. | Partial | Apr 27, 2026 |
| Cranium | Short Hills, US | 2023 | 51-200 | Contact for pricing | Partial | Apr 27, 2026 |
| Pillar Security | Tel Aviv, IL | 2023 | 11-50 | Enterprise pricing only. Not publicly listed. | Adjacent | Apr 27, 2026 |
| Citrusˣ | Tel Aviv, IL | 2021 | 11-50 | Enterprise pricing not publicly listed; demo available upon request. | Adjacent | Apr 27, 2026 |
| Knostic | Herndon, US | 2023 | 11-50 | Contact for pricing | Adjacent | Apr 27, 2026 |
Buyer’s guide
Independent ranking with documented criteria.
See our top picks for EU AI ActFrequently asked
In-depth answers about EU AI Act.
Compare across industries
See which vendors support EU AI Act in your sector.
Last verified April 28, 2026. Informational summary only — not legal advice. Consult qualified counsel for specific obligations.